PerimeterClock

Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.

CVE-2025-32756: Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

Vendor: Fortinet
Product: Multiple Products
EPSS: 0.309 (98.3th percentile, 2026-10-30)

Summary

FortiCamera, FortiMail, FortiNDR, FortiRecorder, and FortiVoice contain a stack-based buffer overflow vulnerability that may allow a remote unauthenticated attacker to execute arbitrary code or commands via crafted HTTP requests. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2025-05-14.

Reviewed by PerimeterClock.

Timeline

Date Event Source
2025-05-14 Added to CISA KEV (confirmed exploitation) CISA KEV

References

Affected and fixed versions: see the vendor advisory or NVD entry below.